@de-otio/trellis 0.4.0

package/dist/lib/validation.js

@@ -0,0 +1,122 @@
+"use strict";
+/**
+ * Input Validation
+ *
+ * Validation schemas and utilities for API endpoints.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Validator = void 0;
+/**
+ * Validator class for input validation
+ */
+class Validator {
+    /**
+     * Validate entity profile input
+     */
+    validateEntityProfile(input) {
+        // Name is required, max 64 characters, must not be empty after trimming
+        if (!input.name ||
+            typeof input.name !== "string" ||
+            input.name.trim().length === 0) {
+            return { valid: false, error: "Name is required and cannot be empty" };
+        }
+        if (input.name.length > 64) {
+            return { valid: false, error: "Name must be 64 characters or less" };
+        }
+        const entityType = input.entityType;
+        // Metadata validation (optional)
+        let metadata = {};
+        if (input.metadata && typeof input.metadata === "object") {
+            metadata = { ...input.metadata };
+        }
+        // Privacy validation (if in metadata)
+        if (metadata.privacy &&
+            !["public", "followers", "private"].includes(metadata.privacy)) {
+            return {
+                valid: false,
+                error: "Privacy must be one of: public, followers, private",
+            };
+        }
+        // ID validation (optional, for updating existing profiles)
+        if (input.id && typeof input.id !== "string") {
+            return { valid: false, error: "ID must be a string" };
+        }
+        return {
+            valid: true,
+            data: {
+                name: input.name,
+                entityType,
+                metadata: Object.keys(metadata).length > 0 ? metadata : undefined,
+                id: input.id,
+            },
+        };
+    }
+    /**
+     * Validate taxonomy taxon IDs
+     * Ensures taxon IDs are in the correct format: dimension:category:taxon
+     */
+    validateTaxonIds(taxonIds) {
+        if (!Array.isArray(taxonIds)) {
+            throw new Error("taxonIds must be an array");
+        }
+        if (taxonIds.length === 0) {
+            throw new Error("taxonIds cannot be empty");
+        }
+        if (taxonIds.length > 20) {
+            throw new Error("Maximum 20 taxonomy tags allowed");
+        }
+        const taxonIdRegex = /^[a-z-]+:[a-z-]+:[a-z-]+$/;
+        const invalidIds = taxonIds.filter((id) => typeof id !== "string" || !taxonIdRegex.test(id));
+        if (invalidIds.length > 0) {
+            throw new Error(`Invalid taxon ID format. Expected format: dimension:category:taxon. Invalid IDs: ${invalidIds.join(", ")}`);
+        }
+        return taxonIds;
+    }
+    /**
+     * Sanitize error for response (don't leak internal details)
+     *
+     * SECURITY: Prevents exposure of:
+     * - Database connection strings (postgresql://, prisma://, etc.)
+     * - Stack traces
+     * - Internal file paths
+     * - Sensitive environment variable names
+     * - Internal error types
+     */
+    sanitizeError(error) {
+        if (error instanceof Error) {
+            const message = error.message;
+            // SECURITY: Filter out sensitive patterns
+            const sensitivePatterns = [
+                /postgresql:\/\/[^\s]+/gi, // PostgreSQL connection strings
+                /prisma:\/\/[^\s]+/gi, // Prisma connection strings
+                /postgres:\/\/[^\s]+/gi, // Postgres connection strings
+                /hyperdrive[^\s]*/gi, // Hyperdrive references
+                /@[^\s]+:[0-9]+\/[^\s]+/gi, // Connection strings with @host:port/db
+                /password[=:][^\s]+/gi, // Password in connection strings
+                /api[_\s-]?key[=:][^\s]+/gi, // API keys (case-insensitive, allows space/underscore/dash)
+                /secret[=:][^\s]+/gi, // Secrets
+                /token[=:][^\s]+/gi, // Tokens
+                /\/Users\/[^\s]+/gi, // File paths (macOS)
+                /\/home\/[^\s]+/gi, // File paths (Linux)
+                /C:\\[^\s]+/gi, // File paths (Windows)
+                /at\s+[^\s]+\s+\(/gi, // Stack trace patterns
+                /TypeError|ReferenceError|SyntaxError/gi, // Internal error types
+            ];
+            // Check if message contains sensitive information
+            for (const pattern of sensitivePatterns) {
+                if (pattern.test(message)) {
+                    return "An error occurred. Please try again later.";
+                }
+            }
+            // Check if it's an internal error we should hide
+            if (message.includes("stack") || message.includes("at ")) {
+                return "An error occurred. Please try again later.";
+            }
+            // Return sanitized message (safe to expose)
+            return message;
+        }
+        return "An error occurred. Please try again later.";
+    }
+}
+exports.Validator = Validator;
+//# sourceMappingURL=validation.js.map

package/dist/lib/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/lib/validation.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAmBH;;GAEG;AACH,MAAa,SAAS;IACpB;;OAEG;IACH,qBAAqB,CAAC,KAAU;QAK9B,wEAAwE;QACxE,IACE,CAAC,KAAK,CAAC,IAAI;YACX,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAC9B,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;QACzE,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACvE,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QAEpC,iCAAiC;QACjC,IAAI,QAAQ,GAAQ,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzD,QAAQ,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC;QAED,sCAAsC;QACtC,IACE,QAAQ,CAAC,OAAO;YAChB,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC9D,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,oDAAoD;aAC5D,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,IAAI,KAAK,CAAC,EAAE,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QACxD,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI;YACX,IAAI,EAAE;gBACJ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU;gBACV,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBACjE,EAAE,EAAE,KAAK,CAAC,EAAE;aACb;SACF,CAAC;IACJ,CAAC;IAID;;;OAGG;IACH,gBAAgB,CAAC,QAAa;QAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,YAAY,GAAG,2BAA2B,CAAC;QACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAChC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CACzD,CAAC;QAEF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,oFAAoF,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5G,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;;OASG;IACH,aAAa,CAAC,KAAc;QAC1B,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAE9B,0CAA0C;YAC1C,MAAM,iBAAiB,GAAG;gBACxB,yBAAyB,EAAE,gCAAgC;gBAC3D,qBAAqB,EAAE,4BAA4B;gBACnD,uBAAuB,EAAE,8BAA8B;gBACvD,oBAAoB,EAAE,wBAAwB;gBAC9C,0BAA0B,EAAE,wCAAwC;gBACpE,sBAAsB,EAAE,iCAAiC;gBACzD,2BAA2B,EAAE,4DAA4D;gBACzF,oBAAoB,EAAE,UAAU;gBAChC,mBAAmB,EAAE,SAAS;gBAC9B,mBAAmB,EAAE,qBAAqB;gBAC1C,kBAAkB,EAAE,qBAAqB;gBACzC,cAAc,EAAE,uBAAuB;gBACvC,oBAAoB,EAAE,uBAAuB;gBAC7C,wCAAwC,EAAE,uBAAuB;aAClE,CAAC;YAEF,kDAAkD;YAClD,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1B,OAAO,4CAA4C,CAAC;gBACtD,CAAC;YACH,CAAC;YAED,iDAAiD;YACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,OAAO,4CAA4C,CAAC;YACtD,CAAC;YAED,4CAA4C;YAC5C,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO,4CAA4C,CAAC;IACtD,CAAC;CACF;AA5ID,8BA4IC"}

package/dist/lib/version.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Application version information
+ *
+ * For Cloudflare Workers, version is read from APP_VERSION env var (set in wrangler.toml or as secret)
+ * Source of truth: apps/api/package.json
+ *
+ * Best Practice: Single source of truth is package.json, injected at build time via env var
+ */
+/**
+ * Get application version from environment
+ * @param env - Cloudflare Workers environment variables
+ * @returns Version string (defaults to '0.1.0' from package.json)
+ */
+export declare function getAppVersion(env?: {
+    APP_VERSION?: string;
+}): string;
+/**
+ * Get build metadata
+ * @param env - Cloudflare Workers environment variables
+ */
+export declare function getBuildInfo(env?: {
+    APP_VERSION?: string;
+    ENVIRONMENT?: string;
+}): {
+    version: string;
+    environment: string | undefined;
+};
+/**
+ * Get formatted version string
+ * Format: "1.2.3" or "1.2.3-dev" for dev builds
+ */
+export declare function getVersionString(env?: {
+    APP_VERSION?: string;
+    ENVIRONMENT?: string;
+}): string;
+//# sourceMappingURL=version.d.ts.map

package/dist/lib/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/lib/version.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEpE;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,CAAC,EAAE;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;;;EAKA;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,CAAC,EAAE;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAST"}

package/dist/lib/version.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * Application version information
+ *
+ * For Cloudflare Workers, version is read from APP_VERSION env var (set in wrangler.toml or as secret)
+ * Source of truth: apps/api/package.json
+ *
+ * Best Practice: Single source of truth is package.json, injected at build time via env var
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAppVersion = getAppVersion;
+exports.getBuildInfo = getBuildInfo;
+exports.getVersionString = getVersionString;
+/**
+ * Get application version from environment
+ * @param env - Cloudflare Workers environment variables
+ * @returns Version string (defaults to '0.1.0' from package.json)
+ */
+function getAppVersion(env) {
+    return env?.APP_VERSION || "0.1.0";
+}
+/**
+ * Get build metadata
+ * @param env - Cloudflare Workers environment variables
+ */
+function getBuildInfo(env) {
+    return {
+        version: getAppVersion(env),
+        environment: env?.ENVIRONMENT,
+    };
+}
+/**
+ * Get formatted version string
+ * Format: "1.2.3" or "1.2.3-dev" for dev builds
+ */
+function getVersionString(env) {
+    const version = getAppVersion(env);
+    const environment = env?.ENVIRONMENT;
+    if (!environment || environment === "prod") {
+        return version;
+    }
+    return `${version}-${environment}`;
+}
+//# sourceMappingURL=version.js.map

package/dist/lib/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/lib/version.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAOH,sCAEC;AAMD,oCAQC;AAMD,4CAYC;AAvCD;;;;GAIG;AACH,SAAgB,aAAa,CAAC,GAA8B;IAC1D,OAAO,GAAG,EAAE,WAAW,IAAI,OAAO,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,SAAgB,YAAY,CAAC,GAG5B;IACC,OAAO;QACL,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC;QAC3B,WAAW,EAAE,GAAG,EAAE,WAAW;KAC9B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,GAGhC;IACC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,GAAG,EAAE,WAAW,CAAC;IAErC,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,GAAG,OAAO,IAAI,WAAW,EAAE,CAAC;AACrC,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,13 @@
+/**
+ * HTTP Server Entry Point
+ *
+ * Wraps the existing route handlers (originally for Cloudflare Workers) in a
+ * Node.js HTTP server. Converts Node IncomingMessage <-> Web Fetch API Request/Response
+ * so all handler code works unchanged.
+ *
+ * Verticals call registerExtension() before startServer().
+ * See the Skybber repo for an example.
+ */
+import http from "node:http";
+export declare function startServer(): Promise<http.Server>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AA8B7B,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAkMxD"}

package/dist/server.js

@@ -0,0 +1,254 @@
+"use strict";
+/**
+ * HTTP Server Entry Point
+ *
+ * Wraps the existing route handlers (originally for Cloudflare Workers) in a
+ * Node.js HTTP server. Converts Node IncomingMessage <-> Web Fetch API Request/Response
+ * so all handler code works unchanged.
+ *
+ * Verticals call registerExtension() before startServer().
+ * See the Skybber repo for an example.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startServer = startServer;
+const node_http_1 = __importDefault(require("node:http"));
+const env_1 = require("./env");
+const router_1 = require("./lib/router");
+const logger_1 = require("./lib/logger");
+const request_context_1 = require("./lib/request-context");
+const session_manager_1 = require("./lib/session-manager");
+const extensions_1 = require("./extensions");
+const extension_validator_1 = require("./lib/extension-validator");
+const MAX_BODY_SIZE = 10 * 1024 * 1024; // 10 MB
+const REQUEST_TIMEOUT_MS = 25_000; // 25 seconds
+async function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let totalBytes = 0;
+        req.on("data", (chunk) => {
+            totalBytes += chunk.length;
+            if (totalBytes > MAX_BODY_SIZE) {
+                req.destroy();
+                reject(new Error("PAYLOAD_TOO_LARGE"));
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("end", () => resolve(Buffer.concat(chunks)));
+        req.on("error", reject);
+    });
+}
+async function startServer() {
+    const PORT = parseInt(process.env.PORT || "3000", 10);
+    const env = await (0, env_1.buildEnv)();
+    // S1.4 — Validate critical environment variables at startup
+    const envErrors = (0, env_1.validateEnv)(env);
+    if (envErrors.length > 0) {
+        console.error("Environment validation failed:");
+        for (const err of envErrors) {
+            console.error(`  - ${err}`);
+        }
+        process.exit(1);
+    }
+    const logger = logger_1.Logger.getInstance({ LOG_LEVEL: env.LOG_LEVEL, NODE_ENV: env.NODE_ENV });
+    // Validate extensions
+    const extensions = (0, extensions_1.getExtensions)();
+    (0, extension_validator_1.validateExtensions)([...extensions]);
+    // Validate extension config schemas against scoped env vars
+    for (const ext of extensions) {
+        if (ext.configSchema && "shape" in ext.configSchema) {
+            const scopedEnv = {};
+            for (const key of Object.keys(ext.configSchema.shape)) {
+                scopedEnv[key] = process.env[key];
+            }
+            const result = ext.configSchema.safeParse(scopedEnv);
+            if (!result.success) {
+                console.error(`Extension "${ext.id}" config invalid:`, result.error);
+                process.exit(1);
+            }
+        }
+    }
+    logger.info(`Loaded ${extensions.length} extension(s): ${extensions.map((e) => e.id).join(", ")}`);
+    // Connection tracking for graceful shutdown
+    let activeConnections = 0;
+    const server = node_http_1.default.createServer(async (req, res) => {
+        const startMs = Date.now();
+        const method = req.method || "GET";
+        const rawUrl = req.url || "/";
+        const host = req.headers.host || `localhost:${PORT}`;
+        try {
+            const url = new URL(rawUrl, `http://${host}`);
+            // Build headers — filter out undefined values
+            const headers = {};
+            for (const [k, v] of Object.entries(req.headers)) {
+                if (v)
+                    headers[k] = Array.isArray(v) ? v.join(", ") : v;
+            }
+            // Only include body for methods that have one
+            const hasBody = !["GET", "HEAD", "OPTIONS"].includes(method);
+            const body = hasBody ? await readBody(req) : undefined;
+            const webRequest = new Request(url, {
+                method,
+                headers,
+                body: body && body.byteLength > 0 ? body : undefined,
+                // @ts-ignore — duplex required in Node.js 18+ for body streams
+                duplex: "half",
+            });
+            // Build request context (region, session) — non-fatal if it fails
+            let requestContext;
+            try {
+                const ctxManager = new request_context_1.RequestContextManager(env);
+                const sessionManager = new session_manager_1.SessionManager();
+                const secret = env.SESSION_SECRET;
+                const session = secret
+                    ? await sessionManager.getSession(webRequest, secret, env)
+                    : null;
+                requestContext = await ctxManager.createRequestContext(webRequest, sessionManager, session);
+            }
+            catch (ctxErr) {
+                logger.error("Failed to create request context", ctxErr);
+                // Continue without context — some routes (e.g. /health) don't need it
+            }
+            // Race the handler against a timeout
+            const routePromise = (0, router_1.routeRequest)({
+                request: webRequest,
+                env,
+                url,
+                pathname: url.pathname,
+                method,
+                requestContext,
+            });
+            const timeoutPromise = new Promise((_, reject) => {
+                setTimeout(() => reject(new Error("REQUEST_TIMEOUT")), REQUEST_TIMEOUT_MS);
+            });
+            const response = await Promise.race([routePromise, timeoutPromise]);
+            if (!response) {
+                res.writeHead(404, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Not found" }));
+                return;
+            }
+            // Write response headers
+            const responseHeaders = {};
+            response.headers.forEach((value, key) => { responseHeaders[key] = value; });
+            res.writeHead(response.status, responseHeaders);
+            // Stream response body
+            const buffer = await response.arrayBuffer();
+            res.end(Buffer.from(buffer));
+            const duration = Date.now() - startMs;
+            logger.info(`${method} ${url.pathname} ${response.status} ${duration}ms`);
+        }
+        catch (err) {
+            const duration = Date.now() - startMs;
+            if (err?.message === "PAYLOAD_TOO_LARGE") {
+                logger.warn(`${method} ${rawUrl} 413 ${duration}ms — payload too large`);
+                if (!res.headersSent) {
+                    res.writeHead(413, { "Content-Type": "application/json" });
+                    res.end(JSON.stringify({ error: "Payload too large" }));
+                }
+                return;
+            }
+            if (err?.message === "REQUEST_TIMEOUT") {
+                logger.warn(`${method} ${rawUrl} 504 ${duration}ms — request timeout`);
+                if (!res.headersSent) {
+                    res.writeHead(504, { "Content-Type": "application/json" });
+                    res.end(JSON.stringify({ error: "Gateway timeout" }));
+                }
+                return;
+            }
+            logger.error(`${method} ${rawUrl} 500 ${duration}ms`, err);
+            if (!res.headersSent) {
+                res.writeHead(500, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Internal server error" }));
+            }
+        }
+    });
+    // Track active connections for graceful shutdown
+    server.on("connection", (conn) => {
+        activeConnections++;
+        conn.on("close", () => {
+            activeConnections--;
+        });
+    });
+    // Graceful shutdown — drain HTTP connections, then close database pools
+    async function shutdown() {
+        logger.info(`Shutting down... (${activeConnections} active connections)`);
+        server.close(async () => {
+            try {
+                // Shutdown extensions
+                for (const ext of extensions) {
+                    if (ext.shutdown) {
+                        try {
+                            await ext.shutdown();
+                        }
+                        catch (err) {
+                            logger.error(`Extension "${ext.id}" shutdown failed`, { error: err?.message });
+                        }
+                    }
+                }
+                const { sharedDatabaseConnectionManager } = await Promise.resolve().then(() => __importStar(require("./lib/database-connection-manager")));
+                await sharedDatabaseConnectionManager.shutdown();
+                logger.info("Server and database pools closed");
+            }
+            catch (err) {
+                logger.error("Error shutting down database pools", { error: err?.message });
+            }
+            process.exit(0);
+        });
+        setTimeout(() => {
+            logger.error(`Forced shutdown after 10s (${activeConnections} connections remaining)`);
+            process.exit(1);
+        }, 10000);
+    }
+    process.on("SIGTERM", shutdown);
+    process.on("SIGINT", shutdown);
+    server.listen(PORT, () => {
+        logger.info(`Trellis API listening on port ${PORT}`);
+    });
+    return server;
+}
+// Auto-start only when this exact file is the entry point (not when imported as @de-otio/trellis)
+const entryFile = process.argv[1];
+const thisFile = __filename;
+if (entryFile === thisFile) {
+    startServer().catch((err) => {
+        console.error("Failed to start server:", err);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCH,kCAkMC;AAhOD,0DAA6B;AAC7B,+BAA8C;AAC9C,yCAA4C;AAC5C,yCAAsC;AACtC,2DAA8D;AAC9D,2DAAuD;AACvD,6CAA6C;AAC7C,mEAA+D;AAE/D,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAChD,MAAM,kBAAkB,GAAG,MAAM,CAAC,CAAC,aAAa;AAEhD,KAAK,UAAU,QAAQ,CAAC,GAAyB;IAC/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;YAC3B,IAAI,UAAU,GAAG,aAAa,EAAE,CAAC;gBAC/B,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,WAAW;IAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,MAAM,IAAA,cAAQ,GAAE,CAAC;IAE7B,4DAA4D;IAC5D,MAAM,SAAS,GAAG,IAAA,iBAAW,EAAC,GAAG,CAAC,CAAC;IACnC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAChD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAExF,sBAAsB;IACtB,MAAM,UAAU,GAAG,IAAA,0BAAa,GAAE,CAAC;IACnC,IAAA,wCAAkB,EAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;IAEpC,4DAA4D;IAC5D,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,YAAY,IAAI,OAAO,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACpD,MAAM,SAAS,GAAuC,EAAE,CAAC;YACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAE,GAAG,CAAC,YAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/D,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CACT,UAAU,UAAU,CAAC,MAAM,kBAAkB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;IAEF,4CAA4C;IAC5C,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,MAAM,MAAM,GAAG,mBAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACnC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,aAAa,IAAI,EAAE,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;YAE9C,8CAA8C;YAC9C,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC;oBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;YAED,8CAA8C;YAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAEvD,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBAClC,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAE,IAA4B,CAAC,CAAC,CAAC,SAAS;gBAC7E,+DAA+D;gBAC/D,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;YAEH,kEAAkE;YAClE,IAAI,cAA0E,CAAC;YAC/E,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,uCAAqB,CAAC,GAAG,CAAC,CAAC;gBAClD,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC;gBAClC,MAAM,OAAO,GAAG,MAAM;oBACpB,CAAC,CAAC,MAAM,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC;oBAC1D,CAAC,CAAC,IAAI,CAAC;gBACT,cAAc,GAAG,MAAM,UAAU,CAAC,oBAAoB,CACpD,UAAU,EACV,cAAc,EACd,OAAO,CACR,CAAC;YACJ,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;gBACzD,sEAAsE;YACxE,CAAC;YAED,qCAAqC;YACrC,MAAM,YAAY,GAAG,IAAA,qBAAY,EAAC;gBAChC,OAAO,EAAE,UAAU;gBACnB,GAAG;gBACH,GAAG;gBACH,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM;gBACN,cAAc;aACf,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,IAAI,OAAO,CAAW,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACzD,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;YAEpE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,yBAAyB;YACzB,MAAM,eAAe,GAA2B,EAAE,CAAC;YACnD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YAEhD,uBAAuB;YACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,IAAI,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YAEtC,IAAI,GAAG,EAAE,OAAO,KAAK,mBAAmB,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,MAAM,QAAQ,QAAQ,wBAAwB,CAAC,CAAC;gBACzE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;gBAC1D,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,GAAG,EAAE,OAAO,KAAK,iBAAiB,EAAE,CAAC;gBACvC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,MAAM,QAAQ,QAAQ,sBAAsB,CAAC,CAAC;gBACvE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;gBACxD,CAAC;gBACD,OAAO;YACT,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,QAAQ,QAAQ,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iDAAiD;IACjD,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/B,iBAAiB,EAAE,CAAC;QACpB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,iBAAiB,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,KAAK,UAAU,QAAQ;QACrB,MAAM,CAAC,IAAI,CAAC,qBAAqB,iBAAiB,sBAAsB,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE;YACtB,IAAI,CAAC;gBACH,sBAAsB;gBACtB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;oBAC7B,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;wBACjB,IAAI,CAAC;4BACH,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;wBACvB,CAAC;wBAAC,OAAO,GAAQ,EAAE,CAAC;4BAClB,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;wBACjF,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM,EAAE,+BAA+B,EAAE,GAAG,wDAAa,mCAAmC,GAAC,CAAC;gBAC9F,MAAM,+BAA+B,CAAC,QAAQ,EAAE,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,KAAK,CAAC,8BAA8B,iBAAiB,yBAAyB,CAAC,CAAC;YACvF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE/B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACvB,MAAM,CAAC,IAAI,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kGAAkG;AAClG,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClC,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;IAC3B,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/types/cloudflare-compat.d.ts

@@ -0,0 +1,134 @@
+/**
+ * Compatibility type shims for code migrated from Cloudflare Workers.
+ * These types match the Cloudflare interfaces so migrated code works unchanged.
+ */
+/** Cloudflare KV Namespace interface — implemented by DynamoDbKvNamespace */
+export interface KVNamespace {
+    get(key: string, options?: {
+        type?: "text" | "json" | "arrayBuffer" | "stream";
+    }): Promise<any>;
+    get(key: string, type: "text"): Promise<string | null>;
+    get(key: string, type: "json"): Promise<any | null>;
+    get<T>(key: string, type: "json"): Promise<T | null>;
+    put(key: string, value: string | ArrayBuffer | ArrayBufferView | ReadableStream, options?: {
+        expiration?: number;
+        expirationTtl?: number;
+        metadata?: Record<string, unknown>;
+    }): Promise<void>;
+    delete(key: string): Promise<void>;
+    list(options?: {
+        prefix?: string;
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        keys: Array<{
+            name: string;
+            expiration?: number;
+            metadata?: unknown;
+        }>;
+        list_complete: boolean;
+        cursor?: string;
+    }>;
+    getWithMetadata<T = unknown>(key: string): Promise<{
+        value: string | null;
+        metadata: T | null;
+    }>;
+}
+/** Cloudflare Queue interface — implemented by SqsQueue */
+export interface CloudflareQueue<T = unknown> {
+    send(message: T, options?: {
+        delaySeconds?: number;
+    }): Promise<void>;
+    sendBatch(messages: Array<{
+        body: T;
+        delaySeconds?: number;
+    }>): Promise<void>;
+}
+/** Alias matching the original Cloudflare Workers `Queue` type name */
+export interface Queue<T = unknown> {
+    send(message: T, options?: {
+        delaySeconds?: number;
+    }): Promise<void>;
+    sendBatch(messages: Array<{
+        body: T;
+        delaySeconds?: number;
+    }>): Promise<void>;
+}
+/** Cloudflare R2 Bucket interface — implemented by S3Storage */
+export interface R2Bucket {
+    put(key: string, value: ReadableStream | ArrayBuffer | ArrayBufferView | string | null, options?: {
+        httpMetadata?: {
+            contentType?: string;
+            contentDisposition?: string;
+            cacheControl?: string;
+        };
+        customMetadata?: Record<string, string>;
+    }): Promise<R2Object>;
+    get(key: string): Promise<R2ObjectBody | null>;
+    delete(key: string | string[]): Promise<void>;
+    list(options?: {
+        prefix?: string;
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        objects: R2Object[];
+        truncated: boolean;
+        cursor?: string;
+    }>;
+    head(key: string): Promise<R2Object | null>;
+}
+export interface R2Object {
+    key: string;
+    size: number;
+    etag: string;
+    httpMetadata?: {
+        contentType?: string;
+    };
+    customMetadata?: Record<string, string>;
+    uploaded: Date;
+    body?: ReadableStream;
+    arrayBuffer(): Promise<ArrayBuffer>;
+    text(): Promise<string>;
+}
+export type R2ObjectBody = R2Object & {
+    body: ReadableStream;
+    arrayBuffer(): Promise<ArrayBuffer>;
+    text(): Promise<string>;
+};
+/** Cloudflare ExecutionContext — used for ctx.waitUntil() */
+export interface ExecutionContext {
+    waitUntil(promise: Promise<unknown>): void;
+    passThroughOnException(): void;
+}
+/** Minimal AnalyticsEngineDataset shim */
+export interface AnalyticsEngineDataset {
+    writeDataPoint(data: {
+        blobs?: string[];
+        doubles?: number[];
+        indexes?: string[];
+    }): void;
+}
+/** Minimal Hyperdrive shim (unused in AWS, only for type compatibility) */
+export interface Hyperdrive {
+    connectionString: string;
+}
+/** Cloudflare Queue MessageBatch — used by queue consumer handlers */
+export interface Message<T = unknown> {
+    id: string;
+    timestamp: Date;
+    body: T;
+    ack(): void;
+    retry(): void;
+}
+export interface MessageBatch<T = unknown> {
+    queue: string;
+    messages: Message<T>[];
+    ackAll(): void;
+    retryAll(): void;
+}
+/** Cloudflare Cron ScheduledEvent */
+export interface ScheduledEvent {
+    scheduledTime: number;
+    cron: string;
+}
+//# sourceMappingURL=cloudflare-compat.d.ts.map

package/dist/types/cloudflare-compat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-compat.d.ts","sourceRoot":"","sources":["../../src/types/cloudflare-compat.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,6EAA6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAChG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACvD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACpD,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,eAAe,GAAG,cAAc,EAAE,OAAO,CAAC,EAAE;QACzF,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5E,IAAI,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;QACvE,aAAa,EAAE,OAAO,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,eAAe,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAClG;AAED,2DAA2D;AAC3D,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,CAAC,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/E;AAED,uEAAuE;AACvE,MAAM,WAAW,KAAK,CAAC,CAAC,GAAG,OAAO;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,CAAC,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/E;AAED,gEAAgE;AAChE,MAAM,WAAW,QAAQ;IACvB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,WAAW,GAAG,eAAe,GAAG,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC,EAAE;QAChG,YAAY,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5F,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACzC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5E,OAAO,EAAE,QAAQ,EAAE,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,EAAE,IAAI,CAAC;IACf,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG;IACpC,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB,CAAC;AAEF,6DAA6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3C,sBAAsB,IAAI,IAAI,CAAC;CAChC;AAED,0CAA0C;AAC1C,MAAM,WAAW,sBAAsB;IACrC,cAAc,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;CAC1F;AAED,2EAA2E;AAC3E,MAAM,WAAW,UAAU;IACzB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,sEAAsE;AACtE,MAAM,WAAW,OAAO,CAAC,CAAC,GAAG,OAAO;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,CAAC,CAAC;IACR,GAAG,IAAI,IAAI,CAAC;IACZ,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACvB,MAAM,IAAI,IAAI,CAAC;IACf,QAAQ,IAAI,IAAI,CAAC;CAClB;AAED,qCAAqC;AACrC,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd"}

package/dist/types/cloudflare-compat.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Compatibility type shims for code migrated from Cloudflare Workers.
+ * These types match the Cloudflare interfaces so migrated code works unchanged.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=cloudflare-compat.js.map

package/dist/types/cloudflare-compat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-compat.js","sourceRoot":"","sources":["../../src/types/cloudflare-compat.ts"],"names":[],"mappings":";AAAA;;;GAGG"}